CVE-2019-8436

CVE-2019-8436 affects imcat 4.5 and is caused by Stored XSS via the root/run/adm.php fm[instop][note] parameter. The connected sources consistently report this vulnerability without providing specific patch details or affected product revisions beyond imcat 4.5. The exploitation, scope, and remed...

CVE-2018-18324

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fmcurrentdir parameter, or the admin/index.php module, servicestart, servicefullstatus, servicerestart, servicestop, or file within the fileeditor parameter...

CVE-2018-13789

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers...

Design/Logic Flaw

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers...

CVE-2018-13789

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers...

CVE-2018-13789

CVE-2018-13789 affects Descor Infocad FM prior to 3.1.0.0. An unauthenticated web service permits retrieval of files from the web server and from reachable SMB servers, indicating potential exposure of sensitive data via network access. The provided documents do not specify affected components be...

fm-oze.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-673838 Description| Value ---|--- Affected Website:| fm-oze.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID32722: Email Messages Distributing Malicious Software on May 8, 2018

Medium Alert ID: 57826 First Published: 2018 May 8 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32722 may contain the following files: Name | Size ...

seguro.maxima.fm XSS vulnerability

Open Bug Bounty ID: OBB-612694 Description| Value ---|--- Affected Website:| seguro.maxima.fm Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fm-m.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-608047 Description| Value ---|--- Affected Website:| fm-m.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

retro-fm-30plus.de XSS vulnerability

Open Bug Bounty ID: OBB-591663 Description| Value ---|--- Affected Website:| retro-fm-30plus.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

opa-fm and opa-ff competitive conditions loophole

opa-fm is an OPA architecture manager. opa-ff is an OPA architecture building tool. A competitive condition vulnerability exists in versions of opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197. No detailed vulnerability details are provided at this time...

CVE-2015-5232

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197...

Race condition

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197...

CVE-2015-5232

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197...

CVE-2015-5232

CVE-2015-5232 involves race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197. The affected components are opa-fm (OPA architecture manager) and opa-ff (OPA architecture building tool), with the root cause described as race conditions affecting concurrent operations. Documen...

Like FM - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Like FM published at the 'play' market has multiple vulnerabilities...

Radio Stations Hacked to Play "F**k Donald Trump" on Repeat Across the Country

It’s just two weeks into the Trump presidency, but his decisions have caused utter chaos around the country. One such order signed by the president was banning both refugees and visa holders from seven Muslim-majority countries Iraq, Iran, Libya, Yemen, Somalia, Syria, and Sudan from entering the...

fm-radio.info XSS vulnerability

Vulnerable URL: http://www.fm-radio.info/net1.php?m=s" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

SPORT1.fm Bundesliga Radio - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application SPORT1.fm Bundesliga Radio published at the 'play' market has multiple vulnerabilities...